VAREXIS-INDEX · Free decision guide
Agent Authority & Tool Trust
A tool is visible and its metadata looks credible, but that does not establish who may use it or what the proposed action is allowed to change.
For: Developers and operators reviewing a proposed agent tool action.
Your decision: Decide which requested operation needs additional identity, permission or destination evidence before relying on the supplied plan.
Evidence to bring
The intended action, resource and recipient; declared owner authority and validity dates; connector identity, credential context, protocol version and dated tool inventories. Keep credentials and private declarations local.
What this evidence supports
The selected documentation distinguishes inventory visibility, token audience, annotation hints and asserted signer identity from authority to perform an action. Apply each source only to its recorded version and scope.
What remains unestablished
These sources do not verify effective permissions, certificate validity, trusted keys or a live deployment. They do not authorise execution. Missing or conflicting identity, audience, scope or destination evidence requires further review.
Read the source evidence
These 6 existing records are free. Review the source version and limitations before applying a finding to your decision.
MCP: Tool inventory depends on request authority
Bind the inventory to the credential context and capture time of the proposed call.
Original source · Reviewed 2026-10-18. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp- Tool
preview_evidence_answer- Arguments
{"route_id":"agentic_reviewed_mcp_tool_list_authorization_cache_context"}- Record identifier
VXI-EXT-PROCUREMENT-MCP-LIST-AUTH-CONTEXT-01-v1- SHA-256
ee1354bddeb675d5165328503912388164339599b3e5b552b34a52aa72105f02
MCP: Access tokens must match the resource audience
Check which resource the token audience is intended to represent.
Original source · Reviewed 2026-10-18. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp- Tool
preview_evidence_answer- Arguments
{"route_id":"agentic_reviewed_mcp_token_audience_not_upstream_authority"}- Record identifier
VXI-EXT-PROCUREMENT-MCP-TOKEN-AUDIENCE-01-v1- SHA-256
8715f08855f7bf6de6db9222753ffffa62465549ae75d853be9a99cfd930cde6
MCP: Tool annotations describe hints, not enforced authority
Separate descriptive tool hints from evidence of enforced authority.
Original source · Reviewed 2026-10-18. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp- Tool
preview_evidence_answer- Arguments
{"route_id":"agentic_reviewed_mcp_tool_annotations_hints_not_permission_enforcement"}- Record identifier
VXI-EXT-PROCUREMENT-MCP-TOOL-ANNOTATIONS-HINTS-NOT-PERMISSION-ENFORCEMENT-01-v1- SHA-256
4f5ad4c44cbe328fb5eabf096988b33d45f0bbe96c57f6ee44ed48cdd8df9916
MCP tool-change notification coverage
Check notification subscription coverage before treating silence as an unchanged inventory.
Original source · Reviewed 2026-10-24. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp- Tool
preview_evidence_answer- Arguments
{"route_id":"agentic_reviewed_mcp_tool_list_change_subscription_boundary"}- Record identifier
VXI-EXT-PROCUREMENT-MCP-TOOL-LIST-CHANGE-SUBSCRIPTION-BOUNDARY-01-v1- SHA-256
b04fd254d52225a58c4831eaf0127d622b40e17168f5d4955a807783612d76c3
SPIFFE signing authority versus caller identity
Distinguish a signing certificate from a workload authentication leaf.
Original source · Reviewed 2026-10-24. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-PROCUREMENT-SPIFFE-SIGNING-CERTIFICATE-NOT-WORKLOAD-01-v1"}- Record identifier
VXI-EXT-PROCUREMENT-SPIFFE-SIGNING-CERTIFICATE-NOT-WORKLOAD-01-v1- SHA-256
3c761098f88c8e9b9d134c40642cd3d69d6d98753d5a22be8b82549787758ab3
DSSE key identifiers and trusted signers
Ask for trusted-key verification evidence beyond a matching key identifier.
Original source · Reviewed 2026-10-24. Full provenance and limitations are retained in the evidence record JSON.
Exact agent access and integrity
- Connector
https://varexis.tech/mcp/catalogue- Tool
get_publication_record- Arguments
{"record_id":"VXI-EXT-PROCUREMENT-DSSE-KEYID-UNTRUSTED-SELECTION-HINT-01-v1"}- Record identifier
VXI-EXT-PROCUREMENT-DSSE-KEYID-UNTRUSTED-SELECTION-HINT-01-v1- SHA-256
c7df30ca8243c4aa1438c60fbcb272dadbb5a4bdba3f9a3f9a3e6a24ddb67081
Connect an evidence client
Configure the two existing MCP connectors, then use the endpoint and arguments shown for each record. The original /mcp provides its frozen search and previews; /mcp/catalogue provides bounded browsing and exact access to additional published records. They are separate tool contracts, not interchangeable connections.
Canonical decision-guide JSON: records, provenance, hashes and checker selection. Enhanced natural-language search remains on HOLD. Keep credentials and private declarations local; public MCP supplies evidence and does not run licensed analysis.
When a local checker helps
Choose Tool Admission for supported GitHub, Playwright, Notion or Slack declaration comparisons. The SPIFFE and DSSE references inform evidence questions; they do not add native certificate or signature verification to the checker.
Buying the existing checker adds repeatable local comparison of supported customer declarations, structured conflicts and content hashes. Reading these free records supplies context but does not analyse your input.
Agent Tool Admission & Permission Control
£49 + VAT · One-time internal-use licence. Separate from saved evidence and subscriptions. VAT is confirmed at checkout.
Supplied inputs: JSON declarations of GitHub, Playwright, Notion or Slack connector identity, requested and allowed actions, resources, recipients and authority; an earlier inventory supports comparison.
Local results: Structured findings about declared permission conflicts, inventory changes and missing verification, with source and content hashes.
Synthetic demonstration: A requested destination is outside the declared authority. Obtain authority evidence before relying on the plan.
Assesses supplied declarations only; no independent live-system testing, runtime enforcement, certification, verified deletion or settlement.
Read the free demonstration and licence terms · Review purchase — £49 + VAT · Existing product details
A free record supplies documented evidence. A licensed checker performs reusable local analysis of supported customer-supplied declarations. Full operational schemas, runnable examples and executable archives accompany the existing licensed package. These examples are concise synthetic excerpts, not complete operational inputs or analyses. No runtime enforcement, live-system verification or certification is supplied. Compare existing prices · Checkout and recovery terms.
Original evidence-pack section · Choose another decision guide
